Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/BCA47662AC3A11F1BD37C8CFCE1D38B0.roa
File:                     BCA47662AC3A11F1BD37C8CFCE1D38B0.roa (raw, json)
Hash identifier:          1aHOqjAbG/Vyek5fSEwl25glNibnEDDQivHJEhgfU/o=
Subject key identifier:   E1:87:4D:A3:6E:66:AA:D1:D0:2B:C2:EF:26:D4:33:2E:6B:39:6C:DD
Certificate issuer:       /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial:       09
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/BCA47662AC3A11F1BD37C8CFCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 10:39:30 +0000
ROA not before:           Wed 09 Sep 2026 10:39:26 +0000
ROA not after:            Tue 30 Sep 2036 10:39:26 +0000
asID:                     37503
IP address blocks:        41.76.8.0/21 maxlen: 30
                          2c0f:f890::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
        Validity
            Not Before: Sep  9 10:39:26 2026 GMT
            Not After : Sep 30 10:39:26 2036 GMT
        Subject: CN=6aa13762-2be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:b2:ec:f0:64:de:47:ee:ba:fc:c7:41:fc:
                    49:66:fc:b4:32:b8:45:c3:ed:31:d5:a4:13:c7:4b:
                    ce:d7:20:e6:f0:5b:c3:73:1f:90:86:b0:5e:fd:89:
                    98:ee:b8:77:d8:1e:6b:05:7c:cf:fe:2a:09:c9:32:
                    d6:ad:b3:47:5b:ae:87:76:fd:3f:f2:6b:56:f0:6b:
                    41:ef:01:fc:7f:6f:5c:0b:1d:9d:f5:42:ed:0e:e8:
                    7e:b4:2e:95:69:20:3a:c4:52:a4:4c:43:cd:ed:80:
                    cb:44:fe:04:7c:bd:14:52:8f:f6:8e:2f:b7:9f:8c:
                    27:fb:66:db:40:18:92:01:2a:f4:9f:13:91:9d:33:
                    c0:3c:da:23:ad:2d:61:c5:33:4c:19:28:52:16:89:
                    7d:be:8d:33:79:9c:f0:8f:84:72:b9:79:3f:82:31:
                    52:b1:c5:bd:5a:3a:f1:67:07:1d:e1:0b:c8:49:2b:
                    d1:f2:7f:9b:2c:22:ce:f1:6b:0a:fe:cd:a4:66:7c:
                    57:00:1f:20:d9:7c:a4:1c:d3:98:84:82:32:45:9d:
                    38:84:77:c0:1d:9d:0e:b6:36:0f:0d:a4:7b:8f:71:
                    d9:d5:2f:18:8b:21:ee:1e:0f:4f:34:70:31:8b:7d:
                    a6:a6:f2:da:18:35:5a:c2:0b:69:26:71:c4:9c:d4:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:87:4D:A3:6E:66:AA:D1:D0:2B:C2:EF:26:D4:33:2E:6B:39:6C:DD
            X509v3 Authority Key Identifier:
                keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/BCA47662AC3A11F1BD37C8CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.8.0/21
                IPv6:
                  2c0f:f890::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:c1:c1:5f:eb:62:9f:39:07:b6:21:81:3f:d5:a8:ac:4c:14:
         71:9a:9e:20:b5:45:ee:1c:03:00:f7:d6:99:70:46:61:bd:ba:
         8c:fb:0c:2d:5d:79:b5:6d:94:c0:8f:1b:93:5c:ab:11:51:a0:
         85:52:ce:23:ec:2a:54:70:a3:4a:74:88:97:bd:d5:19:db:1e:
         2d:63:c5:4b:0c:4f:f3:4a:7c:f0:ad:cc:1a:88:d0:cb:d8:b9:
         c8:d3:da:e1:0b:e5:69:52:2c:40:e9:24:e6:af:47:64:c8:93:
         bd:35:de:9e:db:e7:d5:74:a1:f6:5c:91:c4:c4:d7:6a:02:83:
         d8:b6:62:56:f9:24:57:c4:09:3b:ca:ca:88:18:49:34:b5:82:
         6b:a4:98:6d:3e:6c:57:6f:4a:2a:12:7f:3d:a3:4b:5a:a0:65:
         61:5f:e8:66:26:13:26:a1:26:67:f7:10:da:61:b7:f6:ac:f2:
         e6:bb:f4:0e:b3:76:d6:ec:91:91:20:e0:fc:d2:e1:47:3e:71:
         5e:c6:bb:86:64:0f:d3:f2:8c:36:f7:78:6a:25:5d:83:43:87:
         9f:ed:2b:fe:e2:41:9c:fe:37:d6:a9:91:e4:0d:86:9d:9e:e7:
         14:a8:4f:d1:1c:b9:7f:d6:a4:56:5d:50:5e:41:e4:17:fc:5b:
         b5:24:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----